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DETAILED ACTION 
Examiner's Response to Applicant's Remarks 

1 . Applicant's arguments submitted on 05/10/2004 with respect to claims 1-26 have 
been reconsidered but are not deemed persuasive for the reasons set forth below. 

Examiner's Responses to Applicant's Remarks are listed below: 

2. Applicant argues (under REMARKS section) that, Ambrosini does not teach a 
method for processing calls to a directory, comprising: receiving a call; evaluating the 
call according to one or more rules governing data that may be included in the directory; 
and processing the call based upon the evaluation of the call according to the one or 
more previously determined rules." 

Examiner respectfully disagrees. Ambrosini teaches a method for processing 
calls (i.e. "directory servers can be defined as repositories of attributes/value pairs that clients 
can use to locate entries and attributes using structured queries." (Col 1, lines 29-31) ... "Each 
DA system typically organizes data stored therein differently from other data stored in other DA 

systems." (col 1, lines 40-43) ... "LDAP represents a simple, albeit powerful directory 
service which is capable of performing powerful directory Service queries as 

well as allowing clients to issue commands that add, delete or 
modify directory service entries." (coi 2, lines 20-25) ... "Furthermore, 
through standard interfaces, the schema or organization of the 
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attributes in an LDAP directory are obtainable." (col 2, lines 34-36) . .. 

"LDAP permits a user to control which attributes are required 
and allowed for a particular object class, thus determining 
the schema rules that the entry must obey."(coi 3, lines 15-18) ... 

"However it is important to note that LDAP is not an X.500 directory. Rather it is the protocol 

between parties transacting business relating to any hierarchical, 

attribute-based directory" (col 3, lines 19-23) ... "LDAP defines operations for 
interrogating and updating the directory. Furthermore, LDAP provides 

operations for adding and deleting an entry from the 
directory, changing an existing entry, and changing the 

name Of an entry." (col 3, lines 25-30) ... "At the lowest level, any client requiring 

access to directory information connect to an LDAP server over a TCP connection. Subsequently 
, the client can transmit LDAP commands to the LDAP server over the TCP/IP connection." (col 
4, lines 31-35)... "LDAPv3. 1 provides a "plug-in" architecture which permits a third party 

provider to integrate services into an LDAP server" (col 5, lines 35-37) ... "An LDAP 

server plug-in is a shared object or library containing 
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functions external to the functions provided with the LDAP 

Server. Plug-in functions can be written to perform the following tasks: Validating 

data before the server performs an LDAP operation on the 

data" (col 5, lines 39-45) . . . "Notably, the LDAP server can invoke a plug-in function at 
several points in the process of servicing an LDAP request. For example the LDAP server can 
call the LDAP server plug-in functions before executing an LDAP operation; when the 

LDAP server is to add, modify, delete, or find entries in the 

database" (col 5, lines 52-58) . . . "Further, if the LDAP server plug-in function is invoked 
before an LDAP operation executes, the plug-in function Can prevent the 

LDAP operation from executing. For example, a plug-in function 
can validate data before new entry is added to the directory." 

(col 6, lines 40-45). The preceding text excerpts clearly indicate that various Directory 
Assistance Systems keep their data in various LDAP directories/databases at respective LDAP 

servers. The data at various databases are different. Each database schema or 

Schema rules define what and how the data should be e.g., format/types of data etc. 
LDAP clients (i.e., any application/user that conforms to the LDAP protocol including DA 
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systems) can communicate or send commands (or transaction FC(|llCSt e.g., to search, 

add, delete or modify some data in the database) to the directories/databases. Before the data 
(i.e., attributes or attribute values for an object and schema contains attributes) can be added to 
the directory/database it has to conform to the schema rules. Ambrosini introduces a plug-in 
function that is external to the functions of the LDAP server functions. The plug-in function 
validates the data i.e., it verifies if the data conforms to the schema rules or any other rules that a 
user defines in the plug-in function before it can be applied to the directory/database. Therefore 
the LDAP server monitors and intercepts all calls/transactions (i.e., client commands or 
transaction request to perform some operation on the LDAP directory database) and invokes the 
plug-in function (i.e., diverts/redirects the data to the plug-in function/ rule validator) to verify 
the data using defined rules e.g., user defined rules or schema rules (a particular types of rule 
would be descriptive data and would be considered non-statutory. Therefore if the plug-in 
function is defined to only have add, modify or delete related validation functionality, the LDAP 
server need not invoke the plug-in function before sending/forwarding the data to the 

directory/database. Finally, Examiner believes that all of the 
Applicant's arguments are explicitly addressed.) to a directory (i. e . 

"In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories.") (col 2, lines 16- 
67), Comprising: receiving a Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 

16-67); evaluating (i.e. "determining the schema rules that the entry must obey. ") (col 3, lines 15-18; col 5, lines 
35-67) the Call (Fig. 2; col 2, lines 16-67) according tO One Or more rules (i.e. "LDAP permits a user to 
control which attributes are required and allowed for a particular object class, thus determining the schema rules 
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that the entry must obey. " ... "Plug-in junctions can be written to perform the following tasks: Validating data 
before the server performs an LDAP operation on the data; ") (col 3, lines 15-18; col 5, lines 35-67) governing 

data that may be included in the directory (col 2, lines 16-67); and processing the call (Fig. 2; 

col 2, lines 16-67) based Upon the evaluation (i.e. "determining the schema rules that the entry must 
obey. ") (col 3, lines 15-18; col 5, lines 35-67) Of the Call (i.e. client's query/ request into the directory database) 

(Fig. 2; col 2, lines 16-67) according to the one or more previously determined rules (i.e. "ldap 

permits a user to control which attributes are required and allowed for a particular object class, thus determining 
the schema rules that the entry must obey. " ... "Plug-in functions can be written to perform the following tasks: 
Validating data before the server performs an LDAP operation on the data; ") (col 3, lines 15-18; col 5, lines 35- 
67). 

Applicant argues that Ambrosini does not teach a rule attribute enforcer, 
comprising: a rule validator for determining if attributes in a call to a directory comply 
with rules governing data that may be included in the directory; and a transaction 
monitor for intercepting calls to the directory, such that the transaction monitor diverts 
intercepted calls to the rule validator that include a request to add data to the directory, 
a request to modify data in the directory, or a request to delete data from the directory; 
and forwards intercepted calls to the directory that do not include a request to add data 
to the directory, a request to modify data in the directory, or a request to delete data 
from the directory- 
Examiner respectfully disagrees. Ambrosini teaches a rule attribute enforcer (i.e. 
"directory servers can be defined as repositories of attributes/value pairs that clients can use to 
locate entries and attributes using structured queries." (Col 1, lines 29-31) ... "Each DA system 
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typically organizes data stored therein differently from other data stored in other DA systems." 
(col 1, lines 40-43) . . . "LDAP represents a simple, albeit powerful directory service which is 

capable of performing powerful directory service queries as well as 
allowing clients to issue commands that add, delete or 
modify directory service entries." (coi 2, lines 20-25) ...'Turthermore, 
through standard interfaces, the schema or organization of the 
attributes in an LDAP directory are obtainable." (col 2, lines 34-36) ... 

"LDAP permits a user to control which attributes are required 
and allowed for a particular object class, thus determining 
the schema rules that the entry must obey." (coi 3, lines is-18) ... 

"However it is important to note that LDAP is not an X.500 directory. Rather it is the protocol 

between parties transacting business relating to any hierarchical, 

attribute-based directory" (col 3, lines 19-23) ... "LDAP defines operations for 
interrogating and updating the directory. Furthermore, LDAP provides 

operations for adding and deleting an entry from the 
directory, changing an existing entry, and changing the 
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name Of an entry." (col 3, lines 25-30) . . . "At the lowest level, any client requiring 

access to directory information connect to an LDAP server over a TCP connection. Subsequently 
, the client can transmit LDAP commands to the LDAP server over the TCP/IP connection." (col 
4, lines 31-35) . "LDAPv3.1 provides a "plug-in" architecture which permits a third party 

provider to integrate services into an LDAP server" (col 5, lines 35-37) . . . "An LDAP 

server plug-in is a shared object or library containing 
functions external to the functions provided with the LDAP 

Server. Plug-in functions can be written to perform the following tasks: Validating 

data before the server performs an LDAP operation on the 

data" (col 5, lines 39-45) . . . "Notably, the LDAP server can invoke a plug-in function at 
several points in the process of servicing an LDAP request. For example the LDAP server can 
call the LDAP server plug-in functions before executing an LDAP operation; when the 

LDAP server is to add, modify, delete, or find entries in the 

database" (col 5, lines 52-58) ... "Further, if the LDAP server plug-in function is invoked 

before an LDAP operation executes, the plug-in function can prevent the 

LDAP operation from executing. For example, a plug-in function 
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can validate data before new entry is added to the directory." 

(col 6, lines 40-45). The preceding text excerpts clearly indicate that various Directory 
Assistance Systems keep their data in various LDAP directories/databases at respective LDAP 

servers. The data at various databases are different. Each database schema or 

Schema rules define what and how the data should be e.g., format/types of data etc. 

LDAP clients (i.e., any application/user that conforms to the LDAP protocol including DA 

systems) can communicate or send commands (or transaction request e.g., to search, 

add, delete or modify some data in the database) to the directories/databases. Before the data 
(i.e., attributes or attribute values for an object and schema contains attributes) can be added to 
the directory/database it has to conform to the schema rules. Ambrosini introduces a plug-in 
function that is external to the functions of the LDAP server functions. The plug-in function 
validates the data i.e., it verifies if the data conforms to the schema rules or any other rules that a 
user defines in the plug-in function before it can be applied to the directory/database. Therefore 
the LDAP server monitors and intercepts all calls/transactions (i.e., client commands or 
transaction request to perform some operation on the LDAP directory database) and invokes the 
plug-in function (i.e., diverts/redirects the data to the plug-in function/ rule validator) to verify 
the data using defined rules e.g., user defined rules or schema rules (a particular types of rule 
would be descriptive data and would be considered non-statutory. Therefore if the plug-in 
function is defined to only have add, modify or delete related validation functionality, the LDAP 
server need not invoke the plug-in function before sending/forwarding the data to the 
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directory/database. Finally, Examiner believes that all of the 
Applicant's arguments are explicitly addressed.), comprising: a 

rule validator (i.e. plug-in function) (col 5, lines 35-67; col 6, lines 35-47) for determining (i.e. determining 
if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) if 
attributes (i.e. "In performing a directory query, LDAP clients can choose filter attributes in the directory tree, 
for example a search location, and filter the search therefrom. Sample "base " values can include "st=FL . . . c=us " 
or "I=Boca Raton, ^Highland Beach Directory, st=FL, . . . , c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, 
lines 1-67) in a Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) to B 
directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories. ") 
(col 2, lines 16-67) Comply (i.e. determining if the request data/ entry is valid by some validity standards/rules) 
(col 3, lines 15-18; col 5, lines 35-67) With rules (i.e. validity criteria used by the plug-in function) (col 5, lines 

35-67; col 6, lines 35-47) governing data that may be included in the directory (i.e. "in ldap, the 

basic unit of information consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67); and a 
transaction (i.e. add, modify or delete transaction) (col 5, lines 35-67; col 6, lines 35-47) monitor (i.e. the 
LDAP server) (col 5, lines 50-67) for intercepting (i.e. "An LDAP client can connect to an LDAP servers and 
transmit a request for data. ") (col 4, lines 15-30) Calls (Fig. 2; col 2, lines 16-67) to the directory (col 2, lines 

16-67), such that the transaction monitor (i.e. the ldap server) (col 5, lines 50-67) diverts (i.e. "In 

most cases, when the LDAP server calls an LDAP server plug-in function, the LDAP server passes a parameter 
block to the plug-in function. ") (col 5, lines 35-67; col 6, lines 35-47) intercepted Calls to the rule 

validator (i.e. plug-in function) (col 5, lines 35-67; col 6, lines 35-47) that include a request to add 

data (i.e. "LDAP defines operations for interrogating and updating the directory. Furthermore, LDAP provides 
operations for adding and deleting an entry from the directory, changing an existing entry, and changing the name 
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of an entry. Still the primary operation of LDAP is to search for information stored in the directory. " ... "Further, if 
the LDAP server plug-in function is invoked before an LDAP operation executes, the plug-in Junction can prevent 
the LDAP operation from executing. For example, a plug-in Junction can validate data before a new entry is added 
to the directory. ") (col 3, lines 25-30; col 6, lines 35-47) to the directory (col 2, lines 16-67), a request to 

modify data (col 3, lines 25-30; col 6, lines 35-47) in the directory (col 2, lines 16-67), or a request to 
delete data (col 3, lines 25-30; col 6, lines 35-47) from the directory (col 2, lines 16-67); and forwards 

(i.e. if the client request does not involve adding, deleting or modifying data then the request is for searching data 
and the searching request does not need validation and is merely forwarded/ sent to the directory) (col 3, lines 25-30; 
col 6, lines 35-47) intercepted Calls (Fig. 2; col 2, lines 16-67 to the directory (col 2, lines 16-67) that 

do not include a request to add data (col 3, lines 25-30; col 6, lines 35-47) to the directory (col 2, 
lines 16-67), a request to modify data (col 3, lines 25-30; col 6, lines 35-47) in the directory (col 2, 
lines 16-67), or a request to delete data (col 3, lines 25-30; col 6, lines 35-47) from the directory (col 

2, lines 16-67). 

Any other arguments by the applicant are more limiting than the claimed 
language. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
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applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 1-26 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Ambrosini et al. (U.S. Patent No. 6,609,121 and Ambrosini hereinafter). 

As to claim 1, Ambrosini teaches a method for processing calls (i.e. client's query/ 

request into the directory database) (Fig. 2; col 2, lines 16-67) to a directory (i.e. "In LDAP, the basic unit of 
information consists of an entry. Entries are stored in a directories.") (col 2, lines 16-67), Comprising: 
receiving a Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67); 
evaluating (i.e. "determining the schema rules that the entry must obey. ") (col 3, lines 15-18; col 5, lines 35-67) 
the Call (Fig. 2; col 2, lines 16-67) according tO One Or more rules (i.e. "LDAP permits a user to control 
which attributes are required and allowed for a particular object class, thus determining the schema rules that the 
entry must obey. " ... "Plug-in functions can be written to perform the following tasks: Validating data before the 
server performs an LDAP operation on the data; ") (col 3, lines 15-18; col 5, lines 35-67) governing data that 

may be included in the directory (col 2, lines 16-67); and processing the call (Fig. 2; col 2, lines 

16-67) based Upon the evaluation (i.e. "determining the schema rules that the entry must obey. ") (col 3, 
lines 15-18; col 5, lines 35-67) of the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, 

lines 16-67) according to the one or more previously determined rules (i.e. "ldap permits a user 

to control which attributes are required and allowed for a particular object class, thus determining the schema rules 
that the entry must obey. " ... "Plug-in functions can be written to perform the following tasks: Validating data 
before the server performs an LDAP operation on the data; ") (col 3, lines 15-18; col 5, lines 35-67). 
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As to claim 2, Ambrosini teaches that the step of evaluating (i.e. "determining the 

schema rules that the entry must obey. ") (col 3, lines 15-18; col 5, lines 35-67) the Call includes 
determining if the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) 
includes a request tO add data (i.e. "LDAP represents a simple, albeit powerful directory service which is 
capable of performing powerful directory service queries as well as allowing clients to issue commands that add, 
delete or modify directory service entries. ") (col 2, lines 16-67) to the directory (col 2, lines 16-67), a 

request to modify data (col 2, lines 16-67) in the directory, or a request to delete (col 2, lines 16- 

67) data from the directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are 
stored in a directories. ") (col 2, lines 16-67). 

As to claim 3, Ambrosini teaches wherein if the call (i.e. client's query/ request into the 

directory database) (Fig. 2; col 2, lines 16-67) does not include a request to add data (i.e. "LDAP 

defines operations for interrogating and updating the directory. Furthermore, LDAP provides operations for adding 
and deleting an entry from the directory, changing an existing entry, and changing the name of an entry. Still the 
primary operation of LDAP is to search for information stored in the directory. " ... "Further, if the LDAP server 
plug-in function is invoked before an LDAP operation executes, the plug-in function can prevent the LDAP 
operation from executing. For example, a plug-in function can validate data before a new entry is added to the 
directory. ") (col 3, lines 25-30; col 6, lines 35-47) to the directory (i.e. "In LDAP, the basic unit of information 

consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67), a request tO modify data (col 

3, lines 25-30; col 6, lines 35-47) in the directory, Or a request tO delete data (col 3, lines 25-30; col 6, 

lines 35-47) from the directory (col 2, lines 16-67), then the processing step includes 

forwarding (i.e. if the client request does not involve adding, deleting or modifying data then the request is for 
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searching data and the searching request does not need validation and is merely forwarded/ sent to the directory) (col 
3, lines 25-30; col 6, lines 35-47) the Call to the directory (col 2, lines 16-67). 

AS tO Claim 4, Ambrosini teaches Wherein the Call (i.e. client's query/ request into the 
directory database) (Fig. 2; col 2, lines 16-67) is forwarded to the directory (i.e. "In LDAP, the basic unit of 
information consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67) through a directory 
access Server (i.e. the LDAP server) (col 5, lines 50-67) Controlling access (i.e. 'Tor example, in order 
to restrict searches of a directory to entries exclusively including access control lists, the search phrase 
"objectclass=acl" can be specified so that only entries purporting to be access control lists are located. ") (col 3, 
lines 10-17) to the directory (col 2, lines 16-67). 

As to claim 5, Ambrosini teaches that wherein the evaluation (i.e. "determining the 

schema rules that the entry must obey. ") (col 3, lines 15-18; col 5, lines 35-67) Step further includes 
determining (i.e. determining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15- 
18; col 5, lines 35-67) if One Or more attributes (i.e. " In performing a directory query, LDAP clients can 
choose filter attributes in the directory tree, for example a search location, and filter the search therefrom. Sample 
"base " values can include "st=FL . . . c=us " or "I=Boca Raton, I=Highland Beach Directory, st=FL, 
c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) included in the Call (Fig. 2; col 2, lines 16- 
67) Comply (i.e. determining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15- 
18; col 5, lines 35-67) With One Or more rules in a Set Of rules (i.e. the validity standards/rules or schema 
rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35-67) When the Call (Fig. 2; 
col 2, lines 16-67) includes a request (Fig. 2; col 2, lines 16-67) to add data (i.e. "LDAP defines 
operations for interrogating and updating the directory. Furthermore, LDAP provides operations for adding and 
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deleting an entry from the directory, changing an existing entry, and changing the name of an entry. Still the 
primary operation of LDAP is to search for information stored in the directory. " ... "Further, if the LDAP server 
plug-in Junction is invoked before an LDAP operation executes, the plug-in Junction can prevent the LDAP 
operation from executing. For example, a plug-in Junction can validate data before a new entry is added to the 
directory. ") (col 3, lines 25-30; col 6, lines 35-47) to the directory (i.e. "In LDAP, the basic unit of information 
consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67), a request to modify data (col 

3, lines 25-30; col 6, lines 35-47) in the directory (col 2, lines 16-67), or a request to delete data (col 

3, lines 25-30; col 6, lines 35-47) from the directory (col 2, lines 16-67). 

As to claim 6, Ambrosini teaches that wherein the processing step includes 

forwarding (i.e. to send the client request to the directory if the validity of the client request is fulfilled) (col 3, 
lines 25-30; col 6, lines 35-47) the Call (Fig. 2; col 2, lines 16-67) to the directory (col 2, lines 16-67) When 
the One Or more attributes (i.e. " In performing a directory query, LDAP clients can choose filter attributes 
in the directory tree, for example a search location, and filter the search therefrom. Sample "base" values can 
include "st^FL . . . c=us" or "I=Boca Raton, I=Highland Beach Directory, st=FL, . . . , c=us". ") (col 3, lines 48- 
53; col 4, lines 50-67; col 5, lines 1-67) included in the Call (Fig. 2; col 2, lines 16-67) Comply (i.e. 
determining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 35- 

67) with each of the one or more rules in the first set of rules (i.e. the validity standards/rules or 

schema rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35-67). 

As to claim 7, Ambrosini teaches wherein the call (Fig. 2; col 2, lines 16-67) is 

forwarded (i.e. to send the client request to the directory if the validity of the client request is fulfilled) (col 3, 
lines 25-30; col 6, lines 35-47) to the directory (i.e. "In LDAP, the basic unit of information consists of an 
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entry. Entries are stored in a directories. ") (col 2, lines 16-67) through B directory aCCeSS Server (i.e. the 
LDAP server) (col 5, lines 50-67) Controlling aCCeSS (i.e. "For example, in order to restrict searches of a 
directory to entries exclusively including access control lists, the search phrase "objectclass=acl" can be specified 
so that only entries purporting to be access control lists are located. ") (col 3, lines 10-17) to the directory (col 

2, lines 16-67). 

As to claim 8, Ambrosini teaches that wherein the processing step includes 

forwarding (i.e. to send/ return an error message to the client) (col 6, lines 35-60) an error message (i.e. 
"For example, a plug-in function can validate data before a new entry is added to the directory. If the data is invalid, 
the plug-in function can abort the LDAP add operation and return an error message to the LDAP client) (col 6, lines 
35-48) to a SOUrce (i.e. the LDAP client) (col 6, lines 35-60) Of the Call (i.e. client's query/ request into the 
directory database) (Fig. 2; col 2, lines 16-67) When the One Or more attributes (i.e. "In performing a 

directory query, LDAP clients can choose filter attributes in the directory tree, for example a search location, and 
filter the search therefrom. Sample "base" values can include "st=FL . . . c=us" or "I=Boca Raton, I=Highland 

Beach Directory, st=FL, c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) included in the 

Call (Fig. 2; col 2, lines 16-67) do not Comply (i.e. determining if the request data/ entry is valid by some 
validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) With each Of the One Or more rules in the 
Set Of rules (i.e. the validity standards/rules or schema rules; a set can consist of one or more entities in it.) (col 

3, lines 15-18; col 5, lines 35-67). 

As to claim 9, Ambrosini teaches that wherein the processing step includes 

forwarding (i.e. to send the client request to the directory if the validity of the client request is fulfilled) (col 3, 
lines 25-30; col 6, lines 35-47) the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 
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16-67) to the directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a 
directories. ") (col 2, lines 16-67) when the One Or more attributes (i.e. "In performing a directory query, 
LDAP clients can choose filter attributes in the directory tree, for example a search location, and filter the search 
therefrom. Sample "base " values can include "st=FL . . . c=us " or "I=Boca Raton, I=Highland Beach Directory, 
st=FL, c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) included in the Call Comply 
(i.e. determining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 

35-67) with at least one of the one or more rules in the set of rules (i.e. the validity 

standards/rules or schema rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35- 
67). 

As to claim 10, Ambrosini teaches that wherein the call (i.e. client's query/ request into 

the directory database) (Fig. 2; col 2, lines 16-67) is forwarded to the directory (i.e. "In LDAP, the basic 
unit of information consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67) through a 
directory access Server (i.e. the LDAP server) (col 5, lines 50-67) Controlling access (i.e. "For 
example, in order to restrict searches of a directory to entries exclusively including access control lists, the search 
phrase "objectclass=acl" can be specified so that only entries purporting to be access control lists are located. ") 
(col 3, lines 10-17) to the directory (col 2, lines 16-67). 

As to claim 1 1 , Ambrosini teaches wherein the processing step includes 

forwarding (i.e. to send/ return an error message to the client) (col 6, lines 35-60) an error message (i.e. 
"For example, a plug-in function can validate data before a new entry is added to the directory. If the data is 
invalid, the plug-in function can abort the LDAP add operation and return an error message to the LDAP client) 
(col 6, lines 35-48) to a Source (i.e. the LDAP client) (col 6, lines 35-60) Of the Call (i.e. client's query/ 
request into the directory database) (Fig. 2; col 2, lines 16-67) When the One Or more attributes (i.e. "In 
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performing a directory query, LDAP clients can choose filter attributes in the directory tree, for example a search 
location, and filter the search therefrom. Sample "base" values can include "st=FL . . . c=us" or "I=Boca Raton, 
I=Highland Beach Directory, st=FL, . . . , c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) 
included in the Call (Fig. 2; col 2, lines 16-67) dO not Comply (i.e. determining if the request data/ entry is 

valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) with any Of the One Or more 

rules in the Set Of rules (i.e. the validity standards/rules or schema rules; a set can consist of one or more 

entities in it.) (col 3, lines 15-18; col 5, lines 35-67). 

As to claim 12, Ambrosini teaches that wherein the evaluation (i.e. "determining the 

schema rules that the entry must obey. ") (col 3, lines 15-18; col 5, lines 35-67) Step further includes 
determining (i.e. determining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15- 
18; col 5, lines 35-67) if One Or more attributes (i.e. "In performing a directory query, LDAP clients can 

choose filter attributes in the directory tree, for example a search location, and filter the search therefrom. Sample 
"base" values can include "st-FL . . . c~us" or "I=Boca Raton, I=Highland Beach Directory, st=FL, . . . , c=us tr ) 
(col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) included in the Call (i.e. client's query/ request into the 
directory database) (Fig. 2; col 2, lines 16-67) Comply (i.e. determining if the request data/ entry is valid by some 
validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) with one Or more rules in a first (i.e. the 
validity rule corresponding to the LDAP client's add operation that the plug-in function uses. A set can consist of 
one or more entities) (col 3, lines 15-18; col 5, lines 35-67) Set Of rules (i.e. the validity standards/rules or 

schema rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35-67) when the Call 
includes a request tO add data (i.e. "LDAP defines operations for interrogating and updating the 
directory. Furthermore, LDAP provides operations for adding and deleting an entry from the directory, changing an 
existing entry, and changing the name of an entry. Still the primary operation of LDAP is to search for information 
stored in the directory. " ... "Further, if the LDAP server plug-in function is invoked before an LDAP operation 
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executes, the plug-in Junction can prevent the LDAP operation from executing. For example, a plug-in Junction can 
validate data before a new entry is added to the directory, ") (col 3, lines 25-30; col 6, lines 35-47) to the 

directory, determining if one or more attributes (col 3, lines 48-53; col 4, lines 50-67; col 5, lines l- 
67) included in the call (Fig. 2; col 2, lines 16-67) comply with one or more rules in a second 

(i.e. the validity rule corresponding to the LDAP client's modify operation that the plug-in function uses. A set can 
consist of one or more entities) (col 3, lines 15-18; col 5, lines 35-67) Set Of rules (i.e. the validity 
standards/rules or schema rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35-67) 

when the call (Fig. 2; col 2, lines 16-67) includes a request to modify data (col 3, lines 25-30; col 6, 
lines 35-47) in the directory, and determining (col 3, lines 15-18; col 5, lines 35-67) if one or more 

attributes (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) included in the Call (Fig. 2; col 2, lines 
16-67) Comply With one Or more rules in a third (i.e. the validity rule corresponding to the LDAP 
client's delete operation that the plug-in function uses. A set can consist of one or more entities) (col 3, lines 15-18; 
col 5, lines 35-67) Set Of rules (i.e. the validity standards/rules or schema rules; a set can consist of one or more 
entities in it.) (col 3, lines 15-18; col 5, lines 35-67) when the Call (Fig. 2; col 2, lines 16-67) includes a 

request to delete data (col 3, lines 25-30; col 6, lines 35-47) from the directory (i.e. "in ldap, the 

basic unit of information consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67). 

As to claim 13, Ambrosini teaches wherein the directory (i.e. "inLDAP, the basic unit of 

information consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67) employs the 

lightweight directory access protocol (i.e. ldap) (col 2, lines 16-67). 

As to claim 14, Ambrosini teaches a rule attribute enforcer (i.e. plug-in function) (col 5, 

lines 35-67; col 6, lines 35-47), Comprising: a rule validator (i.e. plug-in function) (col 5, lines 35-67; col 6, 



Application/Control Number: 09/921 ,01 5 Page 20 

Art Unit: 2165 

lines 35-47) for determining (i.e. determining if the request data/ entry is valid by some validity standards/rules) 
(col 3, lines 15-18; col 5, lines 35-67) if attributes (i.e. "In performing a directory query, LDAP clients can 
choose filter attributes in the directory tree, for example a search location, and filter the search therefrom. Sample 
"base " values can include "st=FL . . . c=us " or "I=Boca Raton, I=Highland Beach Directory, st=FL, . . . , 
c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) in a Call (i.e. client's query/ request into the 
directory database) (Fig. 2; col 2, lines 16-67) to a directory (i.e. "In LDAP, the basic unit of information 
consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67) Comply (i.e. determining if the 
request data/ entry is valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) With rules (i.e. 
validity criteria used by the plug-in function) (col 5, lines 35-67; col 6, lines 35-47) governing data that may 
be included in the directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are 
stored in a directories. ") (col 2, lines 16-67); and a transaction (i.e. add, modify or delete transaction) (col 5, 
lines 35-67; col 6, lines 35-47) monitor (i.e. the LDAP server) (col 5, lines 50-67) for intercepting (i.e. "An 
LDAP client can connect to an LDAP servers and transmit a request for data. ") (col 4, lines 15-30) Calls (Fig. 2; 

col 2, lines 16-67) to the directory (col 2, lines 16-67), such that the transaction monitor (i.e. the 

LDAP server) (col 5, lines 50-67) diverts (i.e. "In most cases, when the LDAP server calls an LDAP server plug- 
in Junction, the LDAP server passes a parameter block to the plug-in function. ") (col 5, lines 35-67; col 6, lines 35- 
47) intercepted Calls tO the rule validator (i.e. plug-in function) (col 5, lines 35-67; col 6, lines 35-47) 
that include a request tO add data (i.e. "LDAP defines operations for interrogating and updating the 
directory. Furthermore, LDAP provides operations for adding and deleting an entry from the directory, changing an 
existing entry, and changing the name of an entry. Still the primary operation of LDAP is to search for information 
stored in the directory. " ... "Further, if the LDAP server plug-in Junction is invoked before an LDAP operation 
executes, the plug-in function can prevent the LDAP operation from executing. For example, a plug-in Junction can 
validate data before a new entry is added to the directory. ") (col 3, lines 25-30; col 6, lines 35-47) to the 
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directory (col 2, lines 16-67), a request tO modify data (col 3, lines 25-30; col 6, lines 35-47) in the 

directory (col 2, lines 16-67), or a request to delete data (col 3, lines 25-30; col 6, lines 35-47) from 

the directory (col 2, lines 16-67); and forwards (i.e. if the client request does not involve adding, deleting or 
modifying data then the request is for searching data and the searching request does not need validation and is 
merely forwarded/ sent to the directory) (col 3, lines 25-30; col 6, lines 35-47) intercepted Calls (Fig. 2; col 2, 

lines 16-67 to the directory (col 2, lines 16-67) that do not include a request to add data (col 3, 
lines 25-30; col 6, lines 35-47) to the directory (col 2, lines 16-67), a request to modify data (col 3, 
lines 25-30; col 6, lines 35-47) in the directory (col 2, lines 16-67), or a request to delete data (col 3, 

lines 25-30; col 6, lines 35-47) from the directory (col 2, lines 16-67). 

As to claim 15, Ambrosini teaches wherein when the rule validator (i.e. plug-in 

function) (col 5, lines 35-67; col 6, lines 35-47) determines (i.e. determining if the request data/ entry is valid by 
some validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) that One Or more attributes (i.e. "In 
performing a directory query, LDAP clients can choose filter attributes in the directory tree, for example a search 
location, and filter the search therefrom. Sample "base" values can include "st=FL . . . c=us" or "I -Boca Raton, 
^Highland Beach Directory, st=FL, . . . , c=us ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) 
included in a Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) Comply 
(i.e. determining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 
35-67) With each Of One Or more rules in a Set Of rules (i.e. the validity standards/rules or schema 
rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35-67), the rule validator 
(i.e. plug-in function) (col 5, lines 35-67; col 6, lines 35-47) forwards (i.e. to send the client request to the 
directory if the validity of the client request is fulfilled) (col 3, lines 25-30; col 6, lines 35-47) the Call (Fig. 2; col 
2, lines 16-67). 
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As to claim 16, Ambrosini teaches wherein the rule validator (i.e. plug-in function) (col 

5, lines 35-67; col 6, lines 35-47) forwards (i.e. The LDAP server calls the plug-in function before executing the 

LDAP operation (e.g. add, delete, modify or search); The plug-in function validates the operation and then sends the 
validation result to the LDAP server and the server executes the operation on the directory) (col 5, lines 35-67; col 6, 

lines 35-47) the call to the transaction monitor (i.e. the ldap server) (col 5, lines 50-67), and the 

transaction monitor (i.e. the LDAP server) (col 5, lines 50-67) relays (col 5, lines 35-67; col 6, lines 35-47) 
the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) to the directory 
(i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories. ") (col 2, lines 
16-67). 

As to claim 17, Ambrosini teaches wherein transaction monitor (i.e. the ldap server 

(16), a software entity which is situated in the LDAP server) (Fig. 3; col 5, lines 50-67) relays the Call to the 
directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories. ") 
(col 2, lines 16-67) through a directory access Server (i.e. the LDAP server) (col 5, lines 50-67) that 
Controls aCCeSS (i.e. "For example, in order to restrict searches of a directory to entries exclusively including 
access control lists, the search phrase "objectclass=acl" can be specified so that only entries purporting to be 
access control lists are located. ") (col 3, lines 10-17) to the directory (col 2, lines 16-67). 

As to claim 18, Ambrosini teaches wherein the rule validator (i.e. plug-in function) (col 

5, lines 35-67; col 6, lines 35-47) forwards (i.e. to send the client request to the directory if the validity of the 
client request is fulfilled) (col 3, lines 25-30; col 6, lines 35-47) the Call (i.e. client's query/ request into the 



Application/Control Number: 09/921 ,01 5 Page 23 

Art Unit: 2165 

directory database) (Fig. 2; col 2, lines 16-67) to the directory (i.e. "In LDAP, the basic unit of information 
consists of an entry. Entries are stored in a directories. lf ) (col 2, lines 16-67). 

As to claim 19, Ambrosini teaches wherein the rule validator (i.e. plug-in function) (col 

5, lines 35-67; col 6, lines 35-47) forwards (i.e. The LDAP server calls the plug-in function before executing the 
LDAP operation (e.g. add, delete, modify or search); The plug-in function validates the operation and then sends the 
validation result to the LDAP server and the server executes the operation on the directory) (col 5, lines 35-67; col 6, 
lines 35-47) the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) to the 
directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories. ") 
(col 2, lines 16-67) through a directory access Server (i.e. the LDAP server) (col 5, lines 50-67) that 
Controls access (i.e. "For example, in order to restrict searches of a directory to entries exclusively including 
access control lists, the search phrase "objectclass=acl" can be specified so that only entries purporting to be 
access control lists are located. ") (col 3, lines 10-17) to the directory (col 2, lines 16-67). 

As to claim 20, Ambrosini teaches wherein when the rule validator (i.e. plug-in 

function) (col 5, lines 35-67; col 6, lines 35-47) determines (i.e. deterrnining if the request data/ entry is valid by 
some validity standards/rules) (col 3, lines 15-18; col 5, lines 35-67) that One Or more attributes (i.e. "In 
performing a directory query, LDAP clients can choose filter attributes in the directory tree, for example a search 
location, and filter the search therefrom. Sample "base" values can include "st=FL . . . c=us" or "I=Boca Raton, 
I=Highland Beach Directory, st=FL, c=us". ") (col 3, lines 48-53; col 4, lines 50-67; col 5, lines 1-67) 
included in a Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) Comply 
(i.e. deterrnining if the request data/ entry is valid by some validity standards/rules) (col 3, lines 15-18; col 5, lines 
35-67) With at least one Of One Or more rules in a Set Of rules (i.e. the validity standards/rules or 
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schema rules; a set can consist of one or more entities in it.) (col 3, lines 15-18; col 5, lines 35-67), the Rile 
validator (col 5, lines 35-67; col 6, lines 35-47) forwards (i.e. The LDAP server calls the plug-in function 
before executing the LDAP operation (e.g. add, delete, modify or search); The plug-in function validates the 
operation and then sends the validation result to the LDAP server and the server executes the operation on the 
directory) (col 5, lines 35-67; col 6, lines 35-47) the Call (Fig. 2; col 2, lines 16-67). 

As to claim 21 , Ambrosini teaches wherein the rule validator (i.e. plug-in function) (col 

5, lines 35-67; col 6, lines 35-47) forwards (i.e. The LDAP server calls the plug-in function before executing the 
LDAP operation (e.g. add, delete, modify or search); The plug-in function validates the operation and then sends the 
validation result to the LDAP server and the server executes the operation on the directory) (col 5, lines 35-67; col 6, 
lines 35-47) the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) to the 

transaction monitor (i.e. the ldap server) (col 5, lines 50-67), and the transaction monitor (i.e. the 

LDAP server) (col 5, lines 50-67) relays (col 5, lines 35-67; col 6, lines 35-47) the Call (Fig. 2; col 2, lines 16- 
67) to the directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a 
directories. ") (col 2, lines 16-67). 

As to claim 22, Ambrosini teaches wherein transaction monitor (i.e. the ldap server 

(16), a software entity which is situated in the LDAP server) (Fig. 3; col 5, lines 50-67) relays (col 5, lines 35-67; 
col 6, lines 35-47) the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) to 
the directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a 
directories.") (col 2, lines 16-67) through a directory access Server (i.e. the LDAP server) (col 5, lines 
50-67) that Controls access (i.e. 'Tor example, in order to restrict searches of a directory to entries 
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exclusively including access control lists, the search phrase "objectclass=acl" can be specified so that only entries 
purporting to be access control lists are located. ") (col 3, lines 10-17) to the directory (col 2, lines 16-67). 

As to claim 23, Ambrosini teaches wherein the rule validator (i.e. plug-in function) (col 

5, lines 35-67; col 6, lines 35-47) forwards (i.e. to send the client request to the directory if the validity of the 
client request is fulfilled) (col 3, lines 25-30; col 6, lines 35-47) the Call (i.e. client's query/ request into the 
directory database) (Fig. 2; col 2, lines 16-67) to the directory (i.e. "In LDAP, the basic unit of information 
consists of an entry. Entries are stored in a directories. ") (col 2, lines 16-67). 

As to claim 24, Ambrosini teaches wherein the rule validator (i.e. plug-in function) (col 

5, lines 35-67; col 6, lines 35-47) forwards (i.e. The LDAP server calls the plug-in function before executing the 
LDAP operation (e.g. add, delete, modify or search); The plug-in function validates the operation and then sends the 
validation result to the LDAP server and the server executes the operation on the directory) (col 5, lines 35-67; col 6, 
lines 35-47) the Call (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) to the 
directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories. ") 
(col 2, lines 16-67) through a directory access Server (i.e. the LDAP server) (col 5, lines 50-67) that 
Controls aCCeSS (i.e. "For example, in order to restrict searches of a directory to entries exclusively including 
access control lists, the search phrase "objectclass-acV* can be specified so that only entries purporting to be 
access control lists are located. ") (col 3, lines 10-17) to the directory (col 2, lines 16-67). 

As to claim 25, Ambrosini teaches a directory network (i.e. "The ldap directory service 

is based on a client-server model ") (col 4, lines 15-17), including: One Or more Client Computers (i.e. 
LDAP clients) (col 4, lines 15-120); a directory (i.e. "In LDAP, the basic unit of information consists of an 
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entry. Entries are stored in a directories. ") (col 2, lines 16-67), and an attribute rule enforcer (i.e. plug-in 
function) (col 5, lines 35-67; col 6, lines 35-47), the attribute rule enforcer (i.e. plug-in function) (col 5, 

lines 35-67; col 6, lines 35-47) being arranged in the directory network (col 4, lines 15-17) so as to 

intercept Calls (i.e. client's query/ request into the directory database) (Fig. 2; col 2, lines 16-67) from the 

one or more client computers (i.e. ldap clients) (col 4, lines 15-120) to the directory (col 2, lines 16- 

67). 

As to claim 26, Ambrosini teaches the directory network (i.e. "The ldap directory 

service is based on a client-server model ") (col 4, lines 15-17) further including directory access Server 
(i.e. the LDAP server) (col 5, lines 50-67) that Controls access (i.e. 'Tor example, in order to restrict 
searches of a directory to entries exclusively including access control lists, the search phrase "objectclass=acl" can 
be specified so that only entries purporting to be access control lists are located ") (col 3, lines 10-17) to the 
directory (i.e. "In LDAP, the basic unit of information consists of an entry. Entries are stored in a directories. ") 
(col 2, lines 16-67) interposed (i.e. works between the directory and the plug-in function) (col 5, lines 35-67; col 
6, lines 35-47) between the attribute rule enforcer (i.e. plug-in function) (col 5, lines 35-67; col 6, lines 

35-47) and the directory (col 2, lines 16-67). 

Conclusion 

5. THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded 
of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
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mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 



Points of Contact 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Apu M. Mofiz whose telephone number is (571 ) 272- 
4080. The examiner can normally be reached on Monday - Thursday 8:00 A.M. to 4:30 
P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jeffrey Gaffin can be reached at (571) 272-4146. The fax numbers for the 
group is (571 ) 273-8300. 

Any inquiry of a general nature or relating to the status of this application should 
be directed to the Group receptionist whose telephone number is (703) 305-9600. 




Technology Center 2100 
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